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1. | The manuals referenced will be updated as necessary to harmonize the terminology with that used in this Annex. 
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Historical background 


The provisions in this Annex have been developed in response to recommendations provided by the Directors General of 
Civil Aviation Conference on a Global Strategy for Aviation Safety (Montréal, 20 to 22 March 2006) (DGCA/06) and the 
High-level Safety Conference (Montréal, 29 March to | April 2010) (HLSC/2010) regarding the need for an Annex dedicated 
to safety management. The Air Navigation Commission (186-8), having determined these issues to be of sufficient scope and 
importance, agreed to establish the Safety Management Panel (SMP) to provide recommendations for the development of this 
Annex. 


The Standards and Recommended Practices (SARPs) in this Annex are intended to assist States in managing aviation 
safety risks. Given the increasing complexity of the global air transportation system and its interrelated aviation activities 
required to assure the safe operation of aircraft, this Annex supports the continued evolution of a proactive strategy to 
improve safety performance. The foundation of this proactive safety strategy is based on the implementation of a State safety 
programme (SSP) that systematically addresses safety risks. 


Effective SSP implementation is a gradual process, requiring time to mature fully. Factors that affect the time required to 
establish an SSP include the complexity of the air transportation system as well as the maturity of the aviation safety 
oversight capabilities of the State. 


This Annex consolidates material from existing Annexes regarding SSP and safety management systems (SMSs), as well 
as related elements including the collection and use of safety data and State safety oversight activities. The benefit of drawing 
together this material into a single Annex is to focus States’ attention on the importance of integrating their safety 
management activities. It also facilitates the evolution of safety management provisions. 


Certain State safety management functions required in Annex 19 may be delegated to a regional safety oversight 
organization or a regional accident and incident investigation organization on behalf of the State. 


This Annex that contains SARPs related to responsibilities and processes underlying the safety management by States 
was first adopted by the Council on 25 February 2013 pursuant to the provisions of Article 37 of the Convention on 
International Civil Aviation (Chicago, 1944) and designated as Annex 19 to the Convention. The SARPs were based on 
provisions for safety management initially adopted by the Council in Annexes 1; 6, Parts I, II and III; 8; 11; 13 and 14, 
Volume I, and on recommendations of the first special meeting of the SMP (Montréal, 13 to 17 February 2012). 


In its report to Council on the HLSC/2010 outcomes, the Air Navigation Commission had recommended that the 
development of the new Annex follow a two-phased process. The focus of the first phase was to establish the safety 
management Annex through the consolidation and reorganization of existing SARPs. Amendment | to Annex 19 includes 
substantive amendments to the safety management provisions as described below. 


In recognition of the need to clarify the relationship between the eight critical elements (CEs) of a State safety oversight 
(SSO) system found in Appendix 1 and the detailed SSP framework elements previously found in Attachment A, 
Amendment | to Annex 19 consolidates, in Chapter 3, the provisions related to States’ safety management responsibility. The 
CEs of an SSO system constitute the foundation of an SSP. Chapter 3 integrates the eight CEs of the SSO system with the 
SSP framework elements into a streamlined set of SARPs to facilitate implementation. The CEs remain visible in Appendix 1. 
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Furthermore, Amendment | provides new and amended SMS SARPs to facilitate implementation, including the 
addition of several explanatory notes. Amendment | also extends the applicability of an SMS to organizations responsible for 
the type design and manufacture of engines and propellers, which is facilitated by the recognition of these organizations in 
Annex 8. 


Finally, Amendment | provides enhanced protections to safety data and safety information as well as their sources. One 
of the key elements of the amendment is that guidance material contained in the former Attachment B to Annex 19 has been 
upgraded to the status of SARPs, grouped within a new Appendix. The amendment enhances legal safeguards intended to 
assure the appropriate use and protection of safety information, thereby facilitating its continued availability to support 
proactive safety improvement strategies. Definitions for safety data and safety information have also been developed to 
provide clarity to the scope of the provisions, thereby facilitating consistent application. 


As a result of the adoption of Amendment 1, the second edition of Annex 19 was published. This edition reflects the 
extensive nature of the amendment which completes the second phase of the development of the Annex. Amendment | was 
adopted by the Council on 2 March 2016, became effective on 11 July 2016 and applicable on 7 November 2019. 


Table A shows the origin of subsequent amendments together with a list of the principal subjects involved and the dates 
on which the Annex and the amendments were adopted by the Council, when they became effective and when they became 
applicable. 


Action by Contracting States 


Notification of differences. The attention of Contracting States is drawn to the obligation imposed by Article 38 of the 
Convention by which Contracting States are required to notify the Organization of any differences between their national 
regulations and practices and the International Standards contained in this Annex and any amendments thereto. Contracting 
States are invited to extend such notification to any differences from the Recommended Practices contained in this Annex, 
and any amendments thereto when the notification of such differences is important for the safety of air navigation. Further, 
Contracting States are invited to keep the Organization currently informed of any differences which may subsequently occur 
or of the withdrawal of any differences previously notified. A specific request for notification of differences will be sent to 
Contracting States immediately after the adoption of each Amendment to this Annex. 


Attention of States is also drawn to the provision of Annex 15 related to the publication of differences between their 
national regulations and practices and the related ICAO Standards and Recommended Practices through the Aeronautical 
Information Service, in addition to the obligation of States under Article 38 of the Convention. 

Promulgation of information. The establishment and withdrawal of and changes to facilities, services and procedures 


affecting aircraft operations provided in accordance with the Standards and Recommended Practices specified in this Annex 
should be notified and take effect in accordance with the provisions of Annex 15. 


Status of Annex components 


An Annex is made up of the following component parts, not all of which, however, are necessarily found in every Annex; 
they have the status indicated. 


1.— Material comprising the Annex proper 


a) Standards and Recommended Practices adopted by the Council under the provisions of the Convention. They 
are defined as follows: 
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b) 


c) 


d) 


Standard: Any specification for physical characteristics, configuration, matériel, performance, personnel or 
procedure, the uniform application of which is recognized as necessary for the safety or regularity of 
international air navigation and to which Contracting States will conform in accordance with the Convention; in 
the event of impossibility of compliance, notification to the Council is compulsory under Article 38. 


Recommended Practice: Any specification for physical characteristics, configuration, matériel, performance, 
personnel or procedure, the uniform application of which is recognized as desirable in the interest of safety, 
regularity or efficiency of international air navigation, and to which Contracting States will endeavour to 
conform in accordance with the Convention. 


Appendices comprising material grouped separately for convenience but forming part of the Standards and 
Recommended Practices adopted by the Council. 


Definitions of terms used in the Standards and Recommended Practices which are not self-explanatory in that 
they do not have accepted dictionary meanings. A definition does not have an independent status but is an 
essential part of each Standard and Recommended Practice in which the term is used, since a change in the 
meaning of the term would affect the specification. 


Tables and Figures which add to or illustrate a Standard or Recommended Practice and which are referred to 
therein, form part of the associated Standard or Recommended Practice and have the same status. 


It is to be noted that some Standards in this Annex incorporate, by reference, other specifications having the status of 
Recommended Practices. In such cases, the text of the Recommended Practice becomes part of the Standard. 


2.— Material approved by the Council for publication in association with the Standards and Recommended Practices 


a) 


b) 


d) 


Forewords comprising historical and explanatory material based on the action of the Council and including an 
explanation of the obligations of States with regard to the application of the Standards and Recommended 
Practices ensuing from the Convention and the Resolution of Adoption; 


Introductions comprising explanatory material introduced at the beginning of parts, chapters or sections of the 
Annex to assist in the understanding of the application of the text; 


Notes included in the text, where appropriate, to give factual information or references bearing on the Standards 
or Recommended Practices in question but not constituting part of the Standards or Recommended Practices; 


Attachments comprising material supplementary to the Standards and Recommended Practices or included as a 
guide to their application. 


Selection of language 


This Annex has been adopted in six languages — English, Arabic, Chinese, French, Russian and Spanish. Each Contracting 
State is requested to select one of those texts for the purpose of national implementation and for other effects provided for in 
the Convention, either through direct use or through translation into its own national language, and to notify the Organization 


accordingly. 


Editorial practices 


The following practice has been adhered to in order to indicate at a glance the status of each statement: Standards have been 
printed in light face roman; Recommended Practices have been printed in light face italics, the status being indicated by the 
prefix Recommendation; Notes have been printed in light face italics, the status being indicated by the prefix Note. 
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The following editorial practice has been followed in the writing of specifications: for Standards the operative verb 
“shall” is used, and for Recommended Practices the operative verb “should” is used. 


Any reference to a portion of this document, which is identified by a number and/or title, includes all subdivisions of 


that portion. 


Table A. Amendments to Annex 19 











Adopted 
Effective 
Amendment Source(s) Subject(s) Applicable 
1st Edition Secretariat; first special 25 February 2013 
meeting of the Safety 15 July 2013 
Management Panel 14 November 2013 
(SMP/SM/1) 
1 First meeting of the Further development of safety management provisions and extension of safety 2 March 2016 
(2nd Edition) Safety Management management system (SMS) provisions to organizations responsible for the type 11 July 2016 
Panel (SMP/1) together — design and/or manufacture of engines and propellers. 7 November 2019 
with the 14th meeting 
of Airworthiness 
Panel Working Group 
of the Whole 
(AIRP/WG/WHL/14) 
and the Safety 
Information Protection 
Task Force (SIP TF) 
relating to safety 
management 
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INTERNATIONAL STANDARDS 
AND RECOMMENDED PRACTICES 


CHAPTER 1. DEFINITIONS 


When the following terms are used in the Standards and Recommended Practices for Safety Management, they have the 
following meanings: 


Accident. An occurrence associated with the operation of an aircraft which, in the case of a manned aircraft, takes place 
between the time any person boards the aircraft with the intention of flight until such time as all such persons have 
disembarked, or in the case of an unmanned aircraft, takes place between the time the aircraft is ready to move with the 
purpose of flight until such time as it comes to rest at the end of the flight and the primary propulsion system is shut 
down, in which: 

a) aperson is fatally or seriously injured as a result of: 
— being in the aircraft, or 
— direct contact with any part of the aircraft, including parts which have become detached from the aircraft, or 


— direct exposure to jet blast, 


except when the injuries are from natural causes, self-inflicted or inflicted by other persons, or when the injuries are 
to stowaways hiding outside the areas normally available to the passengers and crew; or 


b) the aircraft sustains damage or structural failure which: 


— adversely affects the structural strength, performance or flight characteristics of the aircraft, and 
— would normally require major repair or replacement of the affected component, 


except for engine failure or damage, when the damage is limited to a single engine, (including its cowlings or 
accessories), to propellers, wing tips, antennas, probes, vanes, tires, brakes, wheels, fairings, panels, landing gear 
doors, windscreens, the aircraft skin (such as small dents or puncture holes), or for minor damages to main rotor 
blades, tail rotor blades, landing gear, and those resulting from hail or bird strike (including holes in the radome); or 


c) the aircraft is missing or is completely inaccessible. 


Note 1.— For statistical uniformity only, an injury resulting in death within thirty days of the date of the accident is 
classified, by ICAO, as a fatal injury. 


Note 2.— An aircraft is considered to be missing when the official search has been terminated and the wreckage has not 
been located. 


Note 3.— The type of unmanned aircraft system to be investigated is addressed in 5.1 of Annex 13. 


Note 4.— Guidance for the determination of aircraft damage can be found in Attachment E of Annex 13. 


ANNEX 19 1-1 TAW9 


Annex 19 — Safety Management Chapter 1 





Aeroplane. A power-driven heavier-than-air aircraft, deriving its lift in flight chiefly from aerodynamic reactions on surfaces 
which remain fixed under given conditions of flight. 


Aircraft. Any machine that can derive support in the atmosphere from the reactions of the air other than the reactions of the 
air against the earth’s surface. 


Hazard. A condition or an object with the potential to cause or contribute to an aircraft incident or accident. 


Helicopter. A heavier-than-air aircraft supported in flight chiefly by the reactions of the air on one or more power-driven 
rotors on substantially vertical axes. 


Note.— Some States use the term “rotorcraft” as an alternative to “helicopter”. 


Incident. An occurrence, other than an accident, associated with the operation of an aircraft which affects or could affect the 
safety of operation. 


Note.— The types of incidents which are of interest for safety-related studies include the incidents listed in Annex 13, 
Attachment C. 


Industry codes of practice. Guidance material developed by an industry body, for a particular sector of the aviation industry 
to comply with the requirements of the International Civil Aviation Organization’s Standards and Recommended 
Practices, other aviation safety requirements and the best practices deemed appropriate. 


Note.— Some States accept and reference industry codes of practice in the development of regulations to meet the 
requirements of Annex 19, and make available, for the industry codes of practice, their sources and how they may be 
obtained. 


Operational personnel. Personnel involved in aviation activities who are in a position to report safety information. 


Note.— Such personnel include, but are not limited to: flight crews; air traffic controllers; aeronautical station 
operators; maintenance technicians; personnel of aircraft design and manufacturing organizations; cabin crews; flight 
dispatchers, apron personnel and ground handling personnel. 


Safety. The state in which risks associated with aviation activities, related to, or in direct support of the operation of aircraft, 
are reduced and controlled to an acceptable level. 


Safety data. A defined set of facts or set of safety values collected from various aviation-related sources, which is used to 
maintain or improve safety. 


Note.— Such safety data is collected from proactive or reactive safety-related activities, including but not limited to: 


a) accident or incident investigations; 
b) safety reporting; 

c) continuing airworthiness reporting; 
d) operational performance monitoring; 
e) inspections, audits, surveys; or 

J) safety studies and reviews. 


Safety information. Safety data processed, organized or analysed in a given context so as to make it useful for safety 
management purposes. 


Safety management system (SMS). A systematic approach to managing safety, including the necessary organizational 
structures, accountability, responsibilities, policies and procedures. 
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Safety oversight. A function performed by a State to ensure that individuals and organizations performing an aviation activity 
comply with safety-related national laws and regulations. 


Safety performance. A State or a service provider’s safety achievement as defined by its safety performance targets and 
safety performance indicators. 


Safety performance indicator. A data-based parameter used for monitoring and assessing safety performance. 


Safety performance target. The State or service provider’s planned or intended target for a safety performance indicator over 
a given period that aligns with the safety objectives. 


Safety risk. The predicted probability and severity of the consequences or outcomes of a hazard. 
Serious injury. An injury which is sustained by a person in an accident and which: 


a) requires hospitalization for more than 48 hours, commencing within seven days from the date the injury was 
received; or 


b) results in a fracture of any bone (except simple fractures of fingers, toes or nose); or 
c) involves lacerations which cause severe haemorrhage, nerve, muscle or tendon damage; or 
d) involves injury to any internal organ; or 
e) involves second or third degree burns, or any burns affecting more than 5 per cent of the body surface; or 
f) involves verified exposure to infectious substances or injurious radiation. 
State of Design. The State having jurisdiction over the organization responsible for the type design. 
State of Manufacture. The State having jurisdiction over the organization responsible for the final assembly of the aircraft. 


State of the Operator. The State in which the operator’s principal place of business is located or, if there is no such place of 
business, the operator’s permanent residence. 


State safety programme (SSP). An integrated set of regulations and activities aimed at improving safety. 
Surveillance. The State activities through which the State proactively verifies through inspections and audits that aviation 


licence, certificate, authorization or approval holders continue to meet the established requirements and function at the 
level of competency and safety required by the State. 
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CHAPTER 2. APPLICABILITY 


The Standards and Recommended Practices contained in this Annex shall be applicable to safety management functions 
related to, or in direct support of, the safe operation of aircraft. 


Note 1.— Safety management provisions for States are contained in Chapter 3 and relate to a State safety programme. 


Note 2.— Within the context of this Annex, the term “service provider” refers to those organizations listed in Chapter 3, 
3.3.2.1 and does not include international general aviation operators. 


Note 3.— Safety management provisions for specified aviation service providers and operators are in Chapter 4 and 
relate to safety management systems (SMSs). 


Note 4.— No provision of this Annex is intended to transfer to the State the responsibilities of the aviation service 
provider or operator. This includes functions related to, or in direct support of, the safe operation of aircraft. 


Note 5.— In the context of this Annex, “responsibility” (singular) refers to “State responsibility” with respect to 


international obligations under the Convention on International Civil Aviation, while “responsibilities” (plural) should be 
given its ordinary meaning (i.e., when referring to functions and activities that may be delegated). 
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CHAPTER 3. STATE SAFETY MANAGEMENT 
RESPONSIBILITIES 


Note 1.— The State safety oversight (SSO) system critical elements (CEs) found in Appendix I constitute the foundation 
of an SSP. 


Note 2.— Safety management provisions pertaining to specific types of aviation activities are addressed in the relevant 
Annexes. 


Note 3.— Basic safety management principles applicable to the medical assessment process of licence holders are 
contained in Annex I. Guidance is available in the Manual of Civil Aviation Medicine (Doc 8984). 


3.1 State safety programme (SSP) 
States shall establish and maintain an SSP that is commensurate with the size and complexity of the State’s civil aviation 
system, but may delegate safety management-related functions and activities to another State, Regional Safety Oversight 


Organization (RSOO) or Regional Accident and Incident Investigation Organization (RAIO). 


Note 1.— States retain responsibility for safety management-related functions and activities delegated to another 
State, RSOO or RAIO. 


Note 2.— Guidance on an SSP and the delegation of safety management-related functions and activities are contained in 
the Safety Management Manual (SMM) (Doc 9859). 


3.2 State safety policy, objectives and resources 


3.2.1 Primary aviation legislation 
3.2.1.1 States shall establish primary aviation legislation in accordance with section 1 of Appendix 1. 
3.2.1.2 Recommendation.— States should establish an enforcement policy that specifies the conditions and 
circumstances under which service providers with an SMS are allowed to deal with, and resolve, events involving certain 
safety issues, internally, within the context of their SMS and to the satisfaction of the appropriate State authority. 
3.2.2 Specific operating regulations 


3.2.2.1 States shall establish specific operating regulations in accordance with section 2 of Appendix 1. 


3.2.2.2 States shall periodically review specific operating regulations, guidance material and implementation policies to 
ensure they remain relevant and appropriate. 
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3.2.3 State system and functions 
3.2.3.1 States shall establish State system and functions in accordance with section 3 of Appendix 1. 
3.2.3.2 Recommendation.— States should identify, define and document the requirements, obligations, functions and 
activities regarding the establishment and maintenance of the SSP, including the directives to plan, organize, develop, 


maintain, control and continuously improve the SSP in a manner that meets the State’s safety objectives. 


3.2.3.3 Recommendation.— States should establish a safety policy and safety objectives that reflect their commitment 
regarding safety and facilitate the promotion of a positive safety culture in the aviation community. 


3.2.3.4 Recommendation.— The safety policy and safety objectives should be published and periodically reviewed to 
ensure that they remain relevant and appropriate to the State. 
3.2.4 Qualified technical personnel 
States shall establish requirements for the qualification of technical personnel in accordance with section 4 of Appendix 1. 
Note.— The term “technical personnel” refers to those persons performing safety-related functions for or on behalf of 
the State. 
3.2.5 Technical guidance, tools and provision of safety-critical information 


States shall establish technical guidance and tools and provide safety-critical information in accordance with section 5 of 
Appendix 1. 


3.3. State safety risk management 
3.3.1 Licensing, certification, authorization and approval obligations 
States shall meet the licensing, certification, authorization and approval obligations in accordance with section 6 of 
Appendix 1. 
3.3.2 Safety management system obligations 
3.3.2.1 States shall require that the following service providers under their authority implement an SMS: 


a) approved training organizations in accordance with Annex | that are exposed to safety risks related to aircraft 
operations during the provision of their services; 


b) operators of aeroplanes or helicopters authorized to conduct international commercial air transport, in accordance 
with Annex 6, Part I or Part III, Section II, respectively; 


Note.— When maintenance activities are not conducted by an approved maintenance organization in 


accordance with Annex 6, Part I, 8.7, but under an equivalent system as in Annex 6, Part I, 8.1.2, or Part II, 
Section IT, 6.1.2, they are included in the scope of the operator’s SMS. 
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c) approved maintenance organizations providing services to operators of aeroplanes or helicopters engaged in 
international commercial air transport, in accordance with Annex 6, Part I or Part II, Section II, respectively; 


d) organizations responsible for the type design or manufacture of aircraft, engines or propellers in accordance with 
Annex 8; 


e) air traffic services (ATS) providers in accordance with Annex 11; and 
f) operators of certified aerodromes in accordance with Annex 14, Volume I. 
Note.— Further provisions related to the implementation of SMS by service providers can be found in Chapter 4. 


3.3.2.2 Recommendation.— States should ensure that safety performance indicators and targets established by 
service providers and operators are acceptable to the State. 


Note.— Guidance on the identification of appropriate safety performance indicators and targets is contained in the 
Safety Management Manual (SMM) (Doc 9859). 


3.3.2.3. The State of Registry shall establish criteria for international general aviation operators of large or turbojet 
aeroplanes in accordance with Annex 6, Part II, Section 3, to implement an SMS. 


Note.— Further provisions related to the implementation of SMS by international general aviation operators can be 
found in Chapter 4. 


3.3.2.4 The criteria established by the State of Registry in accordance with 3.3.2.3 shall address the SMS framework 
and elements contained in Appendix 2. 


Note.— Guidance on establishing the criteria to implement an SMS for international general aviation operators is 
contained in the Safety Management Manual (SMM) (Doc 9859). 
3.3.3. Accident and incident investigation 
States shall establish a process to investigate accidents and incidents in accordance with Annex 13, in support of the 
management of safety in the State. 
3.3.4 Hazard identification and safety risk assessment 
3.3.4.1 States shall establish and maintain a process to identify hazards from collected safety data. 


Note 1. — Further information regarding safety data collection, analysis and the sharing and exchange of safety 
information can be found in Chapter 5. 


Note 2.— Additional information to identify hazards and safety issues on which to base preventive actions may be 
contained in the Final Reports of accidents and incidents. 


3.3.4.2 States shall develop and maintain a process that ensures the assessment of safety risks associated with identified 
hazards. 
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3.3.5 Management of safety risks 
3.3.5.1 States shall establish mechanisms for the resolution of safety issues in accordance with section 8 in Appendix 1. 
3.3.5.2 Recommendation.— States should develop and maintain a process to manage safety risks. 
Note 1.— Actions taken to manage safety risks may include: acceptance, mitigation, avoidance or transfer. 


Note 2.— Safety risks and safety issues often have underlying factors which need to be carefully assessed. 


3.4 State safety assurance 
3.4.1 Surveillance obligations 
3.4.1.1 States shall meet the surveillance obligations in accordance with section 7 of Appendix 1. 


Note.— The surveillance of the service provider takes into consideration the safety performance as well as the size and 
complexity of its aviation products or services. 


3.4.1.2 Recommendation.— States should establish procedures to prioritize inspections, audits and surveys towards 
those areas of greater safety concern or need. 


Note.— Organizational risk profiles, outcomes of hazard identification and risk assessment, and surveillance outcomes 
may provide information for the prioritization of inspections, audits and surveys. 


3.4.1.3 Recommendation.— States should periodically review the safety performance of an individual service 
provider. 
3.4.2 State safety performance 
3.4.2.1 States shall establish the acceptable level of safety performance to be achieved through their SSP. 
Note 1.— An acceptable level of safety performance for the State can be achieved through the implementation and 
maintenance of the SSP as well as safety performance indicators and targets showing that safety is effectively managed and 


built on the foundation of implementation of existing safety-related SARPs. 


Note 2.— Guidance on establishing safety performance indicators and targets, as well as an acceptable level of 
safety performance, is contained in the Safety Management Manual (SMM) (Doc 9859). 


3.4.2.2 Recommendation.— States should develop and maintain a process to evaluate the effectiveness of actions 
taken to manage safety risks and resolve safety issues. 


Note.— Safety assessment results may be used to support the prioritization of actions to manage safety risks. 


3.4.2.3 Recommendation.— States should evaluate the effectiveness of their individual SSPs to maintain or 
continuously improve their overall level of safety performance. 
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3.5 State safety promotion 
3.5.1 Internal communication and 
dissemination of safety information 
Recommendation.— States should promote safety awareness and the sharing and exchange of safety information to 
support, within the State aviation organizations, the development of a positive safety culture that fosters an effective SSP. 
3.5.2 External communication and 
dissemination of safety information 
Recommendation.— States should promote safety awareness and the sharing and exchange of safety information with 
the aviation community to foster the maintenance and improvement of safety and to support the development of a positive 
safety culture. 


Note 1.— Refer to Chapter 5, 5.4, for further details regarding safety information sharing and exchange. 


Note 2.— Promoting safety awareness could include identifying accessible safety training for the aviation community. 
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CHAPTER 4. SAFETY MANAGEMENT SYSTEM (SMS) 


Note 1.— Guidance on implementation of an SMS is contained in the Safety Management Manual (SMM) (Doc 9859). 


Note 2. — An organization may elect to extend one SMS across multiple service provider activities. 


4.1 General 

4.1.1 The SMS of a service provider shall: 

a) be established in accordance with the framework elements contained in Appendix 2; and 

b) be commensurate with the size of the service provider and the complexity of its aviation products or services. 

4.1.2 The State shall ensure that the service provider develops a plan to facilitate SMS implementation. 

4.1.3. The SMS of an approved training organization, in accordance with Annex 1, that is exposed to safety risks related 
to aircraft operations during the provision of its services shall be made acceptable to the State(s) responsible for the 
organization’s approval. 

4.1.4 The SMS of a certified operator of aeroplanes or helicopters authorized to conduct international commercial air 
transport, in accordance with Annex 6, Part I or Part III, Section II, respectively, shall be made acceptable to the State of the 
Operator. 

Note.— When maintenance activities are not conducted by an approved maintenance organization in accordance with 
Annex 6, Part [, 8.7, but under an equivalent system as in Annex 6, Part I, 8.1.2, or Part II, Section II, 6.1.2, they are 
included in the scope of the operator’s SMS. 

4.1.5 The SMS of an approved maintenance organization providing services to operators of aeroplanes or helicopters 
engaged in international commercial air transport, in accordance with Annex 6, Part I or Part III, Section II, respectively, 


shall be made acceptable to the State(s) responsible for the organization’s approval. 


4.1.6 The SMS of an organization responsible for the type design of aircraft, engines or propellers, in accordance with 
Annex 8, shall be made acceptable to the State of Design. 


4.1.7 The SMS of an organization responsible for the manufacture of aircraft, engines or propellers, in accordance with 
Annex 8, shall be made acceptable to the State of Manufacture. 


4.1.8 The SMS of an ATS provider, in accordance with Annex 11, shall be made acceptable to the State responsible for 
the provider’s designation. 


4.1.9 The SMS of an operator of a certified aerodrome, in accordance with Annex 14, Volume I, shall be made 
acceptable to the State responsible for the aerodrome’s certification. 
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4.2 International general aviation — aeroplanes 


Note.— Guidance on the implementation of an SMS for international general aviation is contained in the Safety 
Management Manual (SMM) (Doc 9859) and industry codes of practice. 


The SMS of an international general aviation operator, conducting operations of large or turbojet aeroplanes in accordance 
with Annex 6, Part II, Section 3, shall be commensurate with the size and complexity of the operation and meet the criteria 
established by the State of Registry. 


Note 1.— Further provisions related to the criteria to be established by the State of Registry can be found in Chapter 3. 


Note 2.— Guidance concerning the responsibilities of the State of Registry in connection with lease, charter and 
interchange operations is contained in the Manual of Procedures for Operations Inspection, Certification and Continued 
Surveillance (Doc 8335). Guidance concerning the transfer of State of Registry responsibilities to the State where the aircraft 
operator has its principal place of business or, if it has no such place of business, its permanent address in accordance with 
Article 83 bis is contained in the Manual on the Implementation of Article 83 bis of the Convention on International Civil 
Aviation (Doc 10059). 
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CHAPTER 5. SAFETY DATA AND SAFETY INFORMATION 
COLLECTION, ANALYSIS, PROTECTION, 
SHARING AND EXCHANGE 


Note.— The objective of this chapter is to ensure the continued availability of safety data and safety information to 
support safety management activities. 


5.1 Safety data collection and processing systems 


5.1.1 States shall establish safety data collection and processing systems (SDCPS) to capture, store, aggregate and 
enable the analysis of safety data and safety information. 


Note 1.— SDCPS refers to processing and reporting systems, safety databases, schemes for exchange of information, 
and recorded information including but not limited to: 


a) data and information pertaining to accident and incident investigations; 

b) data and information related to safety investigations by State authorities or aviation service providers; 
c) mandatory safety reporting systems as indicated in 5.1.2; 

d) voluntary safety reporting systems as indicated in 5.1.3; and 


e) self-disclosure reporting systems, including automatic data capture systems, as described in Annex 6, Part I, 
Chapter 3, as well as manual data capture systems. 


Note 2.— Guidance related to SDCPS is contained in the Safety Management Manual (SMM) (Doc 9859). 
Note 3.— The term “safety database” may refer to a single or multiple database(s). 


Note 4.— SDCPS may include inputs from State, industry and public sources, and may be based on reactive and 
proactive methods of safety data and safety information collection. 


Note 5.— Sector-specific safety reporting provisions are contained in other Annexes, PANS and SUPPs. There is a 
recognized benefit to the effective implementation of an SSP in having an integrated approach for the collection and analysis 
of the safety data and safety information from all sources. 


5.1.2 States shall establish a mandatory safety reporting system that includes the reporting of incidents. 


5.1.3. States shall establish a voluntary safety reporting system to collect safety data and safety information not 
captured by mandatory safety reporting systems. 
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5.1.4 Recommendation.— State authorities responsible for the implementation of the SSP should have access to the 
SDCPS as referenced in 5.1.1 to support their safety responsibilities, in accordance with the principles in Appendix 3. 


Note.— State authorities responsible for the implementation of the SSP include accident investigation authorities. 


5.1.5 Recommendation.— The safety database should use standardized taxonomy to facilitate safety information 
sharing and exchange. 


Note.— States are encouraged to use an ADREP-compatible system. More information on ADREP can be found in 
Annex 13, Chapter 7. 
5.2 Safety data and safety information analysis 


5.2.1 States shall establish and maintain a process to analyse the safety data and safety information from the SDCPS 
and associated safety databases. 


Note 1.— Specific State provisions for the identification of hazards as part of their safety risk management and safety 
assurance processes can be found in Chapter 3. 


Note 2.— The purpose of the safety data and safety information analysis performed by the State is to identify systemic 
and cross-cutting hazards that might not otherwise be identified by the safety data analysis processes of individual service 


providers and operators. 


Note 3.— The process may include predictive methods of safety data analysis. 


5.3. Safety data and safety information protection 


5.3.1 States shall accord protection to safety data captured by, and safety information derived from, voluntary safety 
reporting systems and related sources in accordance with Appendix 3. 


Note.— Sources include individuals and organizations. 


5.3.2. Recommendation.— States should extend the protection referred to in 5.3.1 to safety data captured by, and 
safety information derived from, mandatory safety reporting system and related sources. 


Note I1.— A reporting environment where employees and operational personnel may trust that their actions or omissions 
that are commensurate with their training and experience will not be punished is fundamental to safety reporting. 


Note 2.— Guidance related to both mandatory and voluntary safety reporting systems is contained in the Safety 
Management Manual (SMM) (Doc 9859). 


5.3.3. Subject to 5.3.1 and 5.3.2, States shall not make available or use safety data or safety information collected, 
stored or analysed in accordance with 5.1 or 5.2 for purposes other than maintaining or improving safety, unless the 


competent authority determines, in accordance with Appendix 3, that a principle of exception applies. 


5.3.4 Notwithstanding 5.3.3, States shall not be prevented from using safety data or safety information to take any 
preventive, corrective or remedial action that is necessary to maintain or improve aviation safety. 


Note.— Specific provision aimed at ensuring that there is no overlap with the protection of investigation records in 
Annex 13 is contained in Appendix 3, 1.2. 
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5.3.5 States shall take necessary measures, including the promotion of a positive safety culture, to encourage safety 
reporting through the systems referred to in 5.1.2 and 5.1.3. 


Note. — Guidance related to positive safety culture is contained in the Safety Management Manual (SMM) (Doc 9859.) 


5.3.6 Recommendation.— States should facilitate and promote safety reporting by adjusting their applicable laws, 
regulations and policies, as necessary. 


5.3.7 Recommendation.— In support of the determination referred to in 5.3.3, States should institute and make use of 
appropriate advance arrangements between their authorities and State bodies entrusted with aviation safety and those 
entrusted with the administration of justice. Such arrangements should take into account the principles specified in 
Appendix 3. 


Note.— These arrangements may be formalized through legislation, protocols, agreements or memoranda of 
understanding. 


5.4 Safety information sharing and exchange 
Note.— Sharing refers to giving, while exchange refers to giving and receiving in return. 
5.4.1 Ifa State, in the analysis of the information contained in its SDCPS, identifies safety matters considered to be of 
interest to other States, that State shall forward such safety information to them as soon as possible. Prior to sharing such 
information, States shall agree on the level of protection and conditions on which safety information will be shared. The level 


of protection and conditions shall be in line with Appendix 3. 


5.4.2 States shall promote the establishment of safety information sharing or exchange networks among users of the 
aviation system, and facilitate the sharing and exchange of safety information, unless national law provides otherwise. 


Note.— Information on the sharing of safety information can be found in the ICAO Code of Conduct on the Sharing and 
Use of Safety Information in the Global Aviation Safety Plan (Doc 10004). 
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APPENDIX 1. STATE SAFETY OVERSIGHT (SSO) SYSTEM 


CRITICAL ELEMENTS (CEs) 
(See Chapter 3) 


Note 1.— Guidance on the critical elements (CEs) of a system that enables a State to discharge its responsibility for 
safety oversight is contained in the Safety Oversight Manual, Part A, The Establishment and Management of a State’s Safety 
Oversight System (Doc 9734). 


Note 2.— The term “relevant authorities or agencies” is used in a generic sense to include all authorities with aviation 
safety management and oversight responsibility which may be established by States as separate entities, such as: Civil 


Aviation Authorities, Airport Authorities, ATS Authorities, Accident Investigation Authority, and Meteorological Authority. 


Note 3.— The SSO system CEs are applied, as appropriate, to authorities performing safety oversight functions as well 
as authorities performing investigation of accidents and incidents or other State safety management activities. 


Note 4.— See Appendix 5 to Annex 6, Part I, and Appendix I to Annex 6, Part III, for provisions specific to the safety 
oversight of air operators. 


1. Primary aviation legislation (CE-1) 

1.1 States shall promulgate a comprehensive and effective aviation law, commensurate with the size and complexity of 
their aviation activity and consistent with the requirements contained in the Convention on International Civil Aviation, to 
enable the oversight and management of civil aviation safety and the enforcement of regulations through the relevant 
authorities or agencies established for that purpose. 


Note.— This includes ensuring that the aviation law remains relevant and appropriate to the State. 


1.2 The aviation law shall provide personnel performing safety oversight functions access to the aircraft, operations, 
facilities, personnel and associated records, as applicable, of individuals and organizations performing an aviation activity. 


2. Specific operating regulations (CE-2) 
States shall promulgate regulations to address, at a minimum, national requirements emanating from the primary aviation 
legislation, for standardized operational procedures, products, services, equipment and infrastructures in conformity with the 


Annexes to the Convention on International Civil Aviation. 


Note.— The term “regulations” is used in a generic sense and includes but is not limited to instructions, rules, edicts, 
directives, sets of laws, requirements, policies and orders. 
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3. State system and functions (CE-3) 


3.1 States shall establish relevant authorities or agencies, as appropriate, supported by sufficient and qualified 
personnel and provided with adequate financial resources for the management of safety. 


3.2 States authorities or agencies shall have stated safety functions and objectives to fulfil their safety management 
responsibility. 


Note.— This includes the participation of the State aviation organizations in specific activities related to the 
management of safety in the State, and the establishment of the roles, responsibilities and relationships of such organizations. 


3.3. Recommendation.— States should take necessary measures, such as remuneration and conditions of service, to 
ensure that qualified personnel performing safety oversight functions are recruited and retained. 


3.4 States shall ensure that personnel performing safety oversight functions are provided with guidance that addresses 
ethics, personal conduct and the avoidance of actual or perceived conflicts of interest in the performance of official duties. 


3.5 Recommendation.— States should use a methodology to determine their staffing requirements for personnel 
performing safety oversight functions, taking into account the size and complexity of the aviation activities in their State. 


Note.— In addition, Appendix 5 to Annex 6, Part I, and Appendix I to Annex 6, Part IIT, require the State of the Operator 


to use such a methodology to determine its inspector staffing requirements. Inspectors are a subset of personnel performing 
safety oversight functions. 


4. Qualified technical personnel (CE-4) 
4.1 States shall establish minimum qualification requirements for the technical personnel performing safety-related 
functions and provide for appropriate initial and recurrent training to maintain and enhance their competence at the desired 


level. 


4.2 States shall implement a system for the maintenance of training records for technical personnel. 


5. Technical guidance, tools and provision of safety-critical information (CE-5) 
5.1 States shall provide appropriate facilities, comprehensive and up-to-date technical guidance material and procedures, 
safety-critical information, tools and equipment, and transportation means, as applicable, to the technical personnel to enable 
them to perform their safety oversight functions effectively and in accordance with established procedures in a standardized 


manner. 


5.2 States shall provide technical guidance to the aviation industry on the implementation of relevant regulations. 


6. Licensing, certification, authorization and approval obligations (CE-6) 
States shall implement documented processes and procedures to ensure that individuals and organizations performing an 


aviation activity meet the established requirements before they are allowed to exercise the privileges of a licence, certificate, 
authorization or approval to conduct the relevant aviation activity. 
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7. Surveillance obligations (CE-7) 


States shall implement documented surveillance processes, by defining and planning inspections, audits and monitoring 
activities on a continuous basis, to proactively assure that aviation licence, certificate, authorization and approval holders 
continue to meet the established requirements. This includes the surveillance of personnel designated by the Authority to 
perform safety oversight functions on its behalf. 


8. Resolution of safety issues (CE-8) 


8.1 States shall use a documented process to take appropriate actions, up to and including enforcement measures, to 
resolve identified safety issues. 


8.2 States shall ensure that identified safety issues are resolved in a timely manner through a system which monitors 


and records progress, including actions taken by individuals and organizations performing an aviation activity in resolving 
such issues. 
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APPENDIX 2. FRAMEWORK FOR A 


SAFETY MANAGEMENT SYSTEM (SMS) 
(See Chapter 4, 4.1.1) 


Note 1.— Guidance on the implementation of the framework for an SMS is contained in the Safety Management Manual 
(SMM) (Doc 9859). 


Note 2.— The service provider's interfaces with other organizations can make a significant contribution to the safety of 
its products or services. Guidance on interface management as it relates to SMS is provided in the Safety Management 


Manual (SMM) (Doc 9859). 


Note 3.— In the context of this appendix as it relates to service providers, an “accountability” refers to an “obligation” 
that may not be delegated, and “responsibilities” refers to functions and activities that may be delegated. 


This appendix specifies the framework for the implementation and maintenance of an SMS. The framework comprises four 
components and twelve elements as the minimum requirements for SMS implementation: 


1. Safety policy and objectives 
1.1 Management commitment 
1.2 Safety accountability and responsibilities 
1.3. Appointment of key safety personnel 
1.4 Coordination of emergency response planning 
1.5 SMS documentation 


2. Safety risk management 


2.1. Hazard identification 
2.2 Safety risk assessment and mitigation 


3. Safety assurance 
3.1 Safety performance monitoring and measurement 
3.2 The management of change 
3.3 Continuous improvement of the SMS 


4. Safety promotion 


4.1 Training and education 
4.2 Safety communication 
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1. Safety policy and objectives 


1.1 Management commitment 


1.1.1 The service provider shall define its safety policy in accordance with international and national requirements. The 


safety policy shall: 

a) reflect organizational commitment regarding safety, including the promotion of a positive safety culture; 

b) include a clear statement about the provision of the necessary resources for the implementation of the safety policy; 

c) include safety reporting procedures; 

d) clearly indicate which types of behaviours are unacceptable related to the service provider’s aviation activities and 

include the circumstances under which disciplinary action would not apply; 

e) be signed by the accountable executive of the organization; 

f) be communicated, with visible endorsement, throughout the organization; and 

g) be periodically reviewed to ensure it remains relevant and appropriate to the service provider. 

1.1.2 Taking due account of its safety policy, the service provider shall define safety objectives. The safety objectives 
shall: 

a) form the basis for safety performance monitoring and measurement as required by 3.1.2; 

b) reflect the service provider’s commitment to maintain or continuously improve the overall effectiveness of the SMS; 

c) be communicated throughout the organization; and 

d) be periodically reviewed to ensure they remain relevant and appropriate to the service provider. 


Note.— Guidance on setting safety objectives is provided in the Safety Management Manual (SMM) (Doc 9859). 


1.2 Safety accountability and responsibilities 


The service provider shall: 


a) 


b) 


c) 


d) 


e) 
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identify the accountable executive who, irrespective of other functions, is accountable on behalf of the organization 
for the implementation and maintenance of an effective SMS; 


clearly define lines of safety accountability throughout the organization, including a direct accountability for safety 
on the part of senior management; 


identify the responsibilities of all members of management, irrespective of other functions, as well as of employees, 
with respect to the safety performance of the organization; 


document and communicate safety accountability, responsibilities and authorities throughout the organization; and 


define the levels of management with authority to make decisions regarding safety risk tolerability. 
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1.3 Appointment of key safety personnel 

The service provider shall appoint a safety manager who is responsible for the implementation and maintenance of the SMS. 

Note.— Depending on the size of the service provider and the complexity of its aviation products or services, the 
responsibilities for the implementation and maintenance of the SMS may be assigned to one or more persons, fulfilling the 
role of safety manager, as their sole function or combined with other duties, provided these do not result in any conflicts of 
interest. 

1.4 Coordination of emergency response planning 
The service provider required to establish and maintain an emergency response plan for accidents and incidents in aircraft 
operations and other aviation emergencies shall ensure that the emergency response plan is properly coordinated with the 
emergency response plans of those organizations it must interface with during the provision of its products and services. 
1.5 SMS documentation 

1.5.1 The service provider shall develop and maintain an SMS manual that describes its: 

a) safety policy and objectives; 

b) SMS requirements; 

c) SMS processes and procedures; and 


d) accountability, responsibilities and authorities for SMS processes and procedures. 


1.5.2 The service provider shall develop and maintain SMS operational records as part of its SMS documentation. 
Note.— Depending on the size of the service provider and the complexity of its aviation products or services, the SMS 


manual and SMS operational records may be in the form of stand-alone documents or may be integrated with other 
organizational documents (or documentation) maintained by the service provider. 


2. Safety risk management 


2.1 Hazard identification 


2.1.1 The service provider shall develop and maintain a process to identify hazards associated with its aviation 
products or services. 


2.1.2 Hazard identification shall be based on a combination of reactive and proactive methods. 


2.2 Safety risk assessment and mitigation 


The service provider shall develop and maintain a process that ensures analysis, assessment and control of the safety risks 
associated with identified hazards. 


Note.— The process may include predictive methods of safety data analysis. 


APP 2-3 7/11/19 


Annex 19 — Safety Management Appendix 2 





3. Safety assurance 


3.1 Safety performance monitoring and measurement 


3.1.1. The service provider shall develop and maintain the means to verify the safety performance of the organization 
and to validate the effectiveness of safety risk controls. 


Note.— An internal audit process is one means to monitor compliance with safety regulations, the foundation upon 
which SMS is built, and assess the effectiveness of these safety risk controls and the SMS. Guidance on the scope of the 
internal audit process is contained in the Safety Management Manual (SMM) (Doc 9859). 


3.1.2 The service provider’s safety performance shall be verified in reference to the safety performance indicators and 
safety performance targets of the SMS in support of the organization’s safety objectives. 


3.2 The management of change 
The service provider shall develop and maintain a process to identify changes which may affect the level of safety risk 
associated with its aviation products or services and to identify and manage the safety risks that may arise from those changes. 
3.3 Continuous improvement of the SMS 
The service provider shall monitor and assess its SMS processes to maintain or continuously improve the overall 
effectiveness of the SMS. 


4. Safety promotion 


4.1 Training and education 


4.1.1. The service provider shall develop and maintain a safety training programme that ensures that personnel are 
trained and competent to perform their SMS duties. 


4.1.2 The scope of the safety training programme shall be appropriate to each individual’s involvement in the SMS. 


4.2 Safety communication 
The service provider shall develop and maintain a formal means for safety communication that: 
a) ensures personnel are aware of the SMS to a degree commensurate with their positions; 
b) conveys safety-critical information; 
c) explains why particular actions are taken to improve safety; and 


d) explains why safety procedures are introduced or changed. 
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APPENDIX 3. PRINCIPLES FOR THE PROTECTION 
OF SAFETY DATA, SAFETY INFORMATION 


AND RELATED SOURCES 
(See Chapter 5, 5.3) 


Note 1.— The protection of safety data, safety information and related sources is essential to ensure their continued 
availability, since the use of safety data and safety information for purposes other than maintaining or improving safety may 
inhibit the future availability of such data and information, with a significant adverse effect on safety. 


Note 2.— In view of their different legal systems, States have the flexibility to draft their laws and regulations in 
accordance with their policies and practices. 


Note 3.— The principles contained in this appendix are aimed at assisting States to enact and adopt national laws, 
regulations and policies to protect safety data and safety information gathered from safety data collection and processing 
systems (SDCPS), as well as related sources, while allowing for the proper administration of justice and necessary actions 
for maintaining or improving aviation safety. 

Note 4.— The objective is to ensure the continued availability of safety data and safety information by restricting their 
use for purposes other than maintaining or improving aviation safety. 


1. General principles 


1.1 States shall, through national laws, regulations and policies protecting safety data, safety information and related 
sources, ensure that: 


a) a balance is struck between the need for the protection of safety data, safety information and related sources to 
maintain or improve aviation safety, and the need for the proper administration of justice; 


b) safety data, safety information and related sources are protected in accordance with this appendix; 


c) the conditions under which safety data, safety information and related sources qualify for protection are specified; 
and 


d) safety data and safety information remain available for the purpose of maintaining or improving aviation safety. 


Note.— The protection of safety data, safety information and related sources is not intended to interfere with the proper 
administration of justice or with maintaining or improving safety. 


1.2 When an investigation under Annex 13 has been instituted, accident and incident investigation records listed in 
5.12 of Annex 13 shall be subject to the protections accorded therein instead of the protections accorded by this Annex. 
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2. Principles of protection 
2.1 States shall ensure that safety data or safety information is not used for: 


a) disciplinary, civil, administrative and criminal proceedings against employees, operational personnel or 
organizations; 


b) disclosure to the public; or 
c) any purposes other than maintaining or improving safety; 
unless a principle of exception applies. 
2.2 States shall accord protection to safety data, safety information and related sources by ensuring that: 
a) the protection is specified based on the nature of safety data and safety information; 
b) a formal procedure to provide protection to safety data, safety information and related sources is established; 


c) safety data and safety information will not be used in a way different from the purposes for which they were 
collected, unless a principle of exception applies; and 


d) to the extent that a principle of exception applies, the use of safety data and safety information in disciplinary, civil, 
administrative and criminal proceedings will be carried out only under authoritative safeguards. 


Note 1.— The formal procedure may include that any person seeking disclosure of safety data or safety information will 
provide the justification for its release. 


Note 2.— Authoritative safeguards include legal limitations or restrictions such as protective orders, closed proceedings, 
in-camera review, and de-identification of data for the use or disclosure of safety information in judicial or administrative 
proceedings. 


3. Principles of exception 


Exceptions to the protection of safety data, safety information and related sources shall only be granted when the competent 
authority: 


a) determines that there are facts and circumstances reasonably indicating that the occurrence may have been caused by 
an act or omission considered, in accordance with national laws, to be conduct constituting gross negligence, wilful 
misconduct or criminal activity; 


b) after reviewing the safety data or safety information, determines that its release is necessary for the proper 
administration of justice, and that the benefits of its release outweigh the adverse domestic and international impact 
such release is likely to have on the future collection and availability of safety data and safety information; or 


c) after reviewing the safety data or safety information, determines that its release is necessary for maintaining or 
improving safety, and that the benefits of its release outweigh the adverse domestic and international impact such 


release is likely to have on the future collection and availability of safety data and safety information. 


Note 1.— In administering the decision, the competent authority takes into account the consent of the source of the safety 
data and safety information. 
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Note 2.— Different competent authorities may be designated for different circumstances. The competent authority could 
include, but is not limited to, judicial authorities or those otherwise entrusted with aviation responsibilities designated in 
accordance with national law. 


4. Public disclosure 


4.1 States that have right-to-know laws shall, in the context of requests made for public disclosure, create exceptions 
from public disclosure to ensure the continued confidentiality of voluntarily supplied safety data and safety information. 


Note.— Laws, regulations and policies commonly referred to as right-to-know laws (freedom-of-information, open 
records, or sunshine laws) allow for public access to information held by the State. 


4.2 Where disclosure is made in accordance with section 3, States shall ensure that: 


a) public disclosure of relevant personal information included in the safety data or safety information complies with 
applicable privacy laws; or 


b) public disclosure of the safety data or safety information is made in a de-identified, summarized or aggregate form. 


5. Responsibility of the custodian of safety data and safety information 


States shall ensure that each SDCPS has a designated custodian to apply the protection to safety data and safety information 
in accordance with applicable provisions of this appendix. 


Note.— The “custodian” may refer to an individual or organization. 


6. Protection of recorded data 


Note 1.— Ambient workplace recordings required by national laws, for example, cockpit voice recorders (CVRs) or 
recordings of background communication and the aural environment at air traffic controller work stations, may be perceived 
as constituting an invasion of privacy for operational personnel that other professions are not exposed to. 


Note 2.— Provisions on the protection of flight recorder recordings and recordings from air traffic control units during 
investigations instituted under Annex 13 are contained therein. Provisions on the protection of flight recorder recordings 


during normal operations are contained in Annex 6. 


6.1 States shall, through national laws and regulations, provide specific measures of protection regarding the 
confidentiality and access by the public to ambient workplace recordings. 


6.2 States shall, through national laws and regulations, treat ambient workplace recordings required by national laws 
and regulations as privileged protected data subject to the principles of protection and exception as provided for in this 
appendix. 


— END — 
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